NVD

Id
41594  
Name
CVE-2013-6673  
Description
Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 do not recognize a user"s removal of trust from an EV X.509 certificate, which makes it easier for man-in-the-middle attackers to spoof SSL servers in opportunistic circumstances via a valid certificate that is unacceptable to the user.  
Reject
 
CVSS Version
2  
CVSS Score
5.8  
Severity
Medium  
CVSS Base Score
5.8  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:P)  
Pub Date
2017-01-18  
Published
2013-12-11  
Modified Date
2016-12-21  
Seq
2013-6673  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
210488 41594 CVE-2013-6673 FEDORA-2013-23127  View
210489 41594 CVE-2013-6673 FEDORA-2013-23295  View
210490 41594 CVE-2013-6673 FEDORA-2013-23519  View
210491 41594 CVE-2013-6673 FEDORA-2013-23291  View
210492 41594 CVE-2013-6673 SUSE-SU-2013:1919  View
210493 41594 CVE-2013-6673 openSUSE-SU-2013:1916  View
210494 41594 CVE-2013-6673 openSUSE-SU-2013:1917  View
210495 41594 CVE-2013-6673 openSUSE-SU-2013:1918  View
210496 41594 CVE-2013-6673 openSUSE-SU-2013:1957  View
210497 41594 CVE-2013-6673 openSUSE-SU-2013:1958  View
210498 41594 CVE-2013-6673 openSUSE-SU-2013:1959  View
210499 41594 CVE-2013-6673 openSUSE-SU-2014:0008  View
210500 41594 CVE-2013-6673 http://www.mozilla.org/security/announce/2013/mfsa2013-113.html  View
210501 41594 CVE-2013-6673 http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html  View
210502 41594 CVE-2013-6673 64213  View
210503 41594 CVE-2013-6673 1029470  View
210504 41594 CVE-2013-6673 1029476  View
210505 41594 CVE-2013-6673 USN-2052-1  View
210506 41594 CVE-2013-6673 USN-2053-1  View
210507 41594 CVE-2013-6673 https://bugzilla.mozilla.org/show_bug.cgi?id=917380  View
210508 41594 CVE-2013-6673 GLSA-201504-01  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
23913 JVNDB-2013-005488 複数の Mozilla 製品における SSL サーバになりすまされる脆弱性 Mozilla Firefox、Thunderbird、および SeaMonkey は、EV X.509 証明書の信頼設定のユーザによる削除を認識しないため、SSL サーバになりすまされる脆弱性が存在します。 CVE-2013-6673 66615 CVE-2013-6673 41594 5.8 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-005488.html 2013-12-10 2014-01-10 View